Juridique

Privacy Policy

​

1. Purpose of this Privacy Policy

This Privacy Policy explains how Brine ACT collects, uses, stores and protects your personal data when you visit our website www.brineact.com, contact us, or otherwise interact with us in the context of our industrial water treatment and brine management solutions.

We are committed to processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable French data protection law.

 

2. Who is responsible for your data?

The data controller is:

Brine ACT SAS
3 Thomas Gobert, 91120 Palaiseau
Company registration number : 948964036,

Contact for privacy matters: Email: contact@brineact.com

​

3. What data do we collect and how?

We may collect the following categories of personal data:

1. Identification and contact data

   • First and last name

   • Professional email address

   • Telephone number

   • Job title and company name

   • Country / region

2. Professional and project information

   • Information you choose to share about your industrial site, processes, wastewater/brine characteristics, constraints and project needs

   • Any documents or technical data you upload or send via our contact forms or by email

3. Usage and technical data

   • IP address, device and browser type, operating system

   • Pages visited, date and time of visit, time spent, clickstream data

   • Cookie identifiers and similar technologies (subject to your consent where required)

4. Communication data

   • Contents of emails, messages or calls exchanged with Brine ACT

   • Notes relating to our exchanges and follow-up actions

We collect this data in particular when:

• You fill in a contact form on our website

• You request a preliminary study or technical discussion

• You subscribe to our communications (newsletter, events, etc.)

• You browse the website (via cookies and similar technologies)

• You communicate with us by email, phone or other channels

​

4. For what purposes and on what legal bases do we use your data?

We process your personal data for the following purposes and on the following legal bases:

1. Responding to your requests and managing pre‑sales contacts

   • Purposes: responding to your contact requests, organizing meetings, analysing your needs, sending tailored information on our solutions, preparing proposals or preliminary studies.

   • Legal basis: performance of pre‑contractual measures and legitimate interest of Brine ACT to develop its business with professional prospects.

2. Managing customer and partner relationships

   • Purposes: contract follow‑up, project coordination, operational and billing communications.

   • Legal basis: performance of a contract and legitimate interest to ensure proper management of customer relationships.

3. Business development and professional marketing

   • Purposes: sending to professional contacts relevant information about Brine ACT solutions, events, technical content and news, consistent with their role and sector.

   • Legal basis:

     • Legitimate interest for B2B communications when applicable under local law,

     • Or consent when required (e.g. certain newsletters or channels).

4. Website operation, security and improvement

   • Purposes: ensuring the technical functioning and security of the website, generating aggregated statistics on traffic and performance, improving content and user experience.

   • Legal basis:

     • Legitimate interest for strictly necessary cookies and security logs,

     • Consent for analytics and other non‑essential cookies where required.

5. Compliance with legal and regulatory obligations

   • Purposes: compliance with accounting, tax, anti‑fraud or anti‑corruption obligations, management of rights requests and any disputes.

   • Legal basis: legal obligations applicable to Brine ACT.

​

5. Is providing your data mandatory?

When we collect data via a contact form, some fields may be marked as mandatory because we need them to respond to your request or evaluate your project (for example your professional email and a brief description of your need). If you do not provide this data, we may not be able to effectively respond.

For marketing communications and non-essential cookies, you are free to refuse or withdraw your consent at any time without affecting your ability to use our website or receive answers to your direct requests.

​

6. How long do we keep your data?

We keep your personal data only for as long as necessary for the purposes described above, plus any applicable limitation periods.

Indicatively:

• Prospect and contact data (contact forms, email exchanges): kept for up to [5 years] after the last contact or without response, then archived or deleted.

• Customer data: kept for the duration of the contractual relationship, then archived for the applicable legal retention periods (e.g. accounting).

• Marketing data: kept until you object or withdraw your consent, or after a period of [5 years] of inactivity.

• Technical logs and security data: kept for [a few months] to [1 year] depending on the necessity for security and traceability.

• Cookies: stored for the periods described in our Cookie Policy.

You should adjust these durations to match your internal policies and tools.

​

7. Who can access your data?

Access to your personal data is restricted to persons who need it for their tasks, under confidentiality obligations.

This includes:

1. Internal recipients at Brine ACT

   • Team members in charge of sales, technical pre‑studies, customer relations and project management

   • Administrative and management staff as needed

2. External service providers (processors)
   For example:

   • Website hosting provider and technical maintenance

   • CRM and sales tools

   • Emailing and communication tools

   • Analytics and performance measurement services (if used)

These providers process data only on our instructions, under a data processing agreement and with appropriate security measures.

1. Public authorities and advisors

   • When required by law, regulation, or in the context of legal proceedings, audits, or dispute resolution.

We do not sell your personal data.

​

8. International data transfers

Some of our service providers or IT tools may be located outside the European Economic Area (EEA) or store data outside the EEA.

In such cases, we ensure that:

• The destination country has an adequacy decision from the European Commission, or

• Appropriate safeguards are in place, such as standard contractual clauses (SCCs), and any additional measures required to ensure a level of protection essentially equivalent to that in the EU.

You can contact us to obtain more information about these safeguards.

​

9. Cookies and similar technologies

Our website may use cookies and similar technologies to function properly, measure audience, and improve our services.

• Strictly necessary cookies are required for the website to operate and are used on the basis of our legitimate interest.

• Analytics and other non‑essential cookies are used only with your prior consent when required by applicable law.

You can:

• Manage your cookie preferences at any time via the cookie banner or a dedicated “Manage cookies” link in the footer.

• Learn more about the types of cookies we use, their purposes and retention periods in our separate Cookie Policy.

​

10. How do we protect your data?

We implement technical and organizational security measures designed to protect your personal data against unlawful or unauthorized access, loss, destruction, alteration or disclosure.

These measures may include:

• Use of secure protocols (HTTPS) on our website

• Access control and authentication for our internal tools

• Regular updates of systems and software

• Restricted access rights based on roles

• Backups and procedures in case of security incidents

However, no system is completely secure; we encourage you to use caution when sending sensitive information over the internet.

​

11. What are your rights?

In accordance with the GDPR and applicable law, you have the following rights regarding your personal data:

• Right of access: obtain confirmation whether we process your data and access it.

• Right to rectification: have inaccurate or incomplete data corrected.

• Right to erasure (“right to be forgotten”): have your data deleted in certain circumstances.

• Right to restriction of processing: have processing temporarily restricted in certain cases.

• Right to object:

  • object at any time to processing based on our legitimate interest, on grounds relating to your particular situation;

  • object at any time to the use of your data for marketing purposes.

• Right to data portability: receive the personal data you have provided to us in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and is carried out by automated means.

• Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the competent supervisory authority. In France, this is the CNIL (Commission Nationale de l’Informatique et des Libertés).

​

12. How to exercise your rights

To exercise your rights or ask any question about the processing of your personal data, you can contact us at:

Email: contact@brineact.com
Postal address: 3 Thomas Gobert, 91120 Palaiseau

For security reasons, we may ask you to provide proof of identity if necessary. We will respond to your request within the time limits set by the GDPR, usually within one month.

​

13. Updates to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our processing activities, legal requirements, or technical developments.

When we make significant changes, we will:

• Update the “Effective date” at the top of this page, and

• Inform you by appropriate means if required (for example via a notice on the website).

We encourage you to regularly review this page to remain informed about how we protect your data.